CVE-2023-47869: WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability
Published Dec 9, 2024
·Updated
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Tomdever wpForo Forum wpforo allows Code Injection.This issue affects wpForo Forum: from n/a through <= 2.2.5.
Affected Software
3 affected components
gVectors Wpforo Forum Wordpress<2.2.6
gVectors Team wpForo Forum>=n/a<2.2.5
WordPress wpForo plugin<=2.2.5
Remediation
Information
No patched version is available. No reply from the vendor.
Event History
Dec 9, 2024
CVE Published
via MITRE·11:30 AM
Data Sourced
via MITRE·11:30 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-47869?
CVE-2023-47869 has a medium severity rating due to its potential for code injection through improper neutralization of HTML tags.
2
How do I fix CVE-2023-47869?
To fix CVE-2023-47869, update wpForo Forum to version 2.2.6 or later.
3
What versions of wpForo Forum are affected by CVE-2023-47869?
CVE-2023-47869 affects wpForo Forum versions from n/a through 2.2.5.
4
What type of vulnerability is CVE-2023-47869?
CVE-2023-47869 is classified as a basic cross-site scripting (XSS) vulnerability.
5
Can CVE-2023-47869 lead to data compromise?
Yes, CVE-2023-47869 can potentially allow attackers to inject malicious scripts, leading to data compromise.